We can’t read your mail. By design.

Last updated October 2, 2026

The short version

Jefi makes two Mac apps, Jefi Mail and Jefi Shot, and this website. Both apps run on your Mac. Jefi Mail talks directly to your email provider; Jefi Shot keeps your recordings on your Mac. We don’t operate servers that receive, store, or process your email or your recordings, so there is nothing of yours for us to read, sell, or lose. Neither app contains analytics, advertising SDKs, or usage tracking.

Jump to Jefi Mail, Jefi Shot, or payments, licences and this site.

Jefi Mail

What stays on your Mac

Your messages, attachments, drafts, and contacts.
Your search index and every search you run.
Your account passwords and tokens, stored in macOS Keychain.
Your settings and preferences.

What the app sends, and where

Jefi Mail connects to the mail servers of the accounts you add, using encrypted connections, to sync and send your mail. That traffic goes to your provider and is covered by their privacy policy, not ours.

The app contains no analytics, no advertising SDKs, and no usage tracking.

A few things you do in Jefi Mail reach other servers, always on your behalf:

Images in email. Images that load from a sender’s servers are blocked until you ask for them, so opening a message tells the sender nothing: tracking pixels never fire. A banner at the top of the message offers to show the images once, or always for that sender. Senders you have allowed are listed in Settings, and you can remove any of them. The setting itself is “Ask” by default, and you can switch it to always show. Even when images are allowed, Jefi loads them only over https, never plain http. Images that travel inside the email, attached or inline, always show: displaying those contacts nobody. Jefi also strips the speculative network hints senders put in mail (dns-prefetch, preconnect, preload), which would otherwise reach out before you did. Scripts in email never run.
Links. Clicking a link in an email shows its destination for you to review before opening it in your default browser. Jefi checks the address locally without visiting the website. You can optionally enable downloaded phishing lists in Settings; this is off by default. When enabled, Jefi downloads public lists from Phishing.Database and verifies them using published checksums or GitHub snapshot metadata; these downloads do not include your email links. Trusted domains you add in Settings stay on your Mac; trusting a domain does not prove a link is safe or suppress a reported-phishing warning. You can optionally save your own Google Web Risk API key in macOS Keychain. Only when you choose “Check with Google” does Jefi send that full link to Google, including any private tokens in it, for a threat lookup under your Google Cloud account. Reading an email or hovering a link does not start a Google lookup. Once you choose to open a link, the website can see your visit, and a tracking redirect can tell the sender you clicked. Blocking remote images does not prevent that tracking.
Unsubscribe. When you unsubscribe from a mailing list, Jefi contacts the address the sender published for that purpose (a web request or an email from your account).

Signing in to Gmail and Outlook

Gmail accounts sign in with an app password you create in your Google Account. Outlook accounts use “Sign in with Microsoft”, which gives Jefi Mail an access token for your mailbox. Either way, the password or tokens are stored in macOS Keychain on your Mac and are only ever sent to your provider, to sign in and to sync and send your mail over IMAP and SMTP.

What Jefi Mail accesses: your email messages, attachments, labels or folders, and your email address.
How it’s used: only to provide the features you see in the app: showing, searching, organizing, and sending your mail on your Mac.
What we never do: your mail never reaches servers we operate. We don’t transfer it to anyone, use it for advertising, sell it, or use it to train AI models, and no person at Jefi can read it. The one exception is yours to make: if you turn on AI features, the messages you use them on go to the AI provider you chose, as described below.
Removing access: remove the account in Jefi Mail to delete its mail and credentials from your Mac. You can also delete the app password at myaccount.google.com/apppasswords, or revoke Jefi Mail at account.live.com/consent/Manage for Microsoft accounts.

AI features

Jefi Mail offers optional AI features: summarizing a conversation, drafting a reply or a new email, rewriting your own draft, and an assistant you can chat with about your mail. They are off until you turn them on, and nothing is sent to an AI provider before then.

You choose the provider. Claude uses your own Anthropic API key. OpenAI uses either your own OpenAI API key or your ChatGPT plan, through OpenAI’s official Codex CLI signed in with your ChatGPT account. Keys you give Jefi Mail are stored in macOS Keychain. In every case, the request goes directly from your Mac to the provider.
Official integrations only. Jefi Mail never borrows a Claude subscription or reads provider credentials itself. ChatGPT runs through OpenAI’s supported Codex CLI in an ephemeral, read-only session, and the CLI manages its own login.
What gets sent. Only the content an action needs, such as the messages in the conversation you ask to summarize, goes to the provider, and only when you use a feature. It never passes through servers we operate.
The assistant. When you chat with the assistant, the provider can use Jefi Mail’s own tools to search and read your mail and to act in the app (open a conversation, write a draft, archive, star, snooze). What those tools return, such as a conversation it reads, is sent to the provider. If you have more than one account, it can also list your newest unread Inbox mail across all of them (up to 50 conversations: subject, sender, date, a short preview and which account each is in), for example when you ask it to catch you up, so mail from your other accounts can reach the provider too. It never sends email: drafts open for you to review. With ChatGPT, Jefi Mail offers these tools only to that one run, on your Mac, behind a one-time token, and switches off the CLI’s shell, browser and file access.
How the provider handles it. Content you send is covered by that provider’s applicable terms and privacy policy (Anthropic, OpenAI), not ours. Please read them before turning AI features on.
Turning it off. Turn AI features off, remove your API key, or sign out of the Codex CLI at any time, and Jefi Mail stops sending anything.

Jefi Shot

What stays on your Mac

Every recording, its edits, captions and exports, in the Jefi Shot folder in your Movies folder.
What Jefi Shot tracks to polish a recording: where you clicked and moved the pointer, and when and where you typed. It never records which keys you pressed.
Your settings, your licence key (in macOS Keychain), and your assistant conversations.

Jefi Shot has no upload feature and no cloud library. Captions are transcribed on your Mac, and Find sensitive info reads the text in a recording on your Mac; neither sends anything anywhere. A video leaves your Mac only when you export it and share the file yourself.

What the app sends, and where

Jefi Shot talks to jefi.app for two things only: checking your licence (see payments and licences) and showing the current price. Neither request carries anything about your recordings or your screen.

The assistant and agents

Jefi Shot’s assistant, and coding agents you connect to it, are off until you set them up. They run on your Mac using your own Codex or Claude Code sign-in; Jefi never borrows a subscription or reads provider credentials itself.

What gets sent. To plan and record a demo, the agent can see screenshots of the window you shared, the text and controls in it, and details of your recordings, and it can click and type in that window. What it sees and reads goes from your Mac to the provider you chose, never through servers we operate.
How the provider handles it. That content is covered by the provider’s terms and privacy policy (Anthropic, OpenAI), not ours. Share a window that shows only what you’re comfortable sending.
Local only. The tools agents use are served on your Mac alone, behind a one-time token, and aren’t reachable from the network.

The email list

If you join the list, we store your email address and the date you joined, in a database on Cloudflare, the host of this site. We use it for one thing: telling you about releases and pricing for Jefi’s apps. We never share or sell it, and we’ll delete it whenever you ask.

Payments and licences

Polar is the merchant of record for Jefi Mail and Jefi Shot. When you buy, you are on Polar’s checkout: it takes the payment, handles tax, emails your receipt and licence key, and holds whatever payment details it needs under its own privacy policy. We never see or store your card.

What we keep is what Polar tells us about the order: the order’s identifier, your purchase email address, the product, the amount, the status and the billing country Polar collected for tax. We use it to count each app’s founding licences and to answer you if you write about a purchase.

Activating, checking and deactivating a licence goes from either app to jefi.app, which passes the request straight to Polar. Polar holds the licence keys and their activations. Those requests carry your licence key, which app it’s for, and a label identifying the Mac, and nothing else: no mail, no recordings, no usage.

This website

Every page load adds one to an anonymous daily tally: which page, which day, which country (from Cloudflare), and which site linked here, if any. No cookie is set for this and no identifier is kept — we never store your IP address, your browser, the time of your visit, or any path through the site. Clicks on Download are counted the same anonymous way. Bots, crawlers and link previews are left out of the counts.

If you accept the cookie notice, this site additionally sets one cookie: a random identifier with no meaning outside our own database, used only so that a day’s visitor count means people rather than page loads. It is stored only alongside a date, to answer “counted today already?”, and is deleted after 400 days. If you decline, or ignore the notice, no cookie is set; your visit only adds to the anonymous tally.

There are no third-party trackers, no advertising, and nothing is shared or sold. Declining deletes the identifier we hold for you straight away. To stop abuse of the signup form, we briefly use your IP address to rate-limit requests; it is never stored.

If you write to us

Messages from the contact form or email are kept only until we’ve answered them, then deleted. Ask us to delete anything we hold about you, and we will.

Bug reports and feature requests sent from inside Jefi Mail go to the same place and are treated the same way. They contain what you type, the address you give for a reply, and, unless you switch it off, your Jefi Mail version, macOS version and type of Mac. They never include your mail, accounts, or anything else from the app.

Contact

Questions about any of this: hello@jefi.app.